Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft
File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json)
Hash identifier: 1zxKaJdFGrL3oFbXATs0LMIT12WH6XoyzO9R2i9ZXn4=
Subject key identifier: 5C:FD:4A:A2:DB:82:5E:95:2E:D7:97:94:A8:5E:9C:C6:ED:2C:3E:89
Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58
Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358
Certificate serial: 7FCFCE29D9095F9BA4F53D9C65DDF7CDB6E36FFE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft
Manifest number: 056D
Signing time: Tue 28 Apr 2026 11:12:00 +0000
Manifest this update: Tue 28 Apr 2026 11:07:00 +0000
Manifest next update: Fri 01 May 2026 11:28:00 +0000
Files and hashes: 1: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: fECGkaA2UGH3ZFdOH+k9n57cEwaPbsRZ9Xb2Gz+QtTM=)
2: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=)
3: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=)
4: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=)
5: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:cf:ce:29:d9:09:5f:9b:a4:f5:3d:9c:65:dd:f7:cd:b6:e3:6f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358
Validity
Not Before: Apr 28 11:07:00 2026 GMT
Not After : May 1 11:28:00 2026 GMT
Subject: CN=5CFD4AA2DB825E952ED79794A85E9CC6ED2C3E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:e7:ff:55:b0:14:2f:20:23:48:e1:54:f8:
5b:b6:44:93:a1:28:d4:ed:dd:99:b2:7c:7f:1b:22:
8e:8b:61:29:ae:53:1b:cb:aa:86:5c:37:9c:89:a4:
60:c5:ed:14:33:7c:29:20:61:80:f7:e7:ea:ea:7d:
b2:66:2d:f7:75:7c:27:e2:4c:51:a4:fe:14:47:4d:
a1:2c:a4:f7:68:2c:eb:01:88:dd:64:67:e6:f4:be:
f1:63:0e:e6:0b:dc:ea:89:05:a5:fd:ae:f1:22:46:
5d:45:be:0c:75:15:c8:0a:de:f8:81:0c:0e:5a:03:
23:39:ff:72:4c:7f:a6:60:8c:32:48:d4:1e:e5:bb:
2a:c7:16:f3:7d:f3:9a:41:77:2a:75:12:a6:2a:ad:
04:b2:36:59:42:5d:45:29:8f:db:7d:9b:5d:66:96:
f0:2a:3d:01:12:86:33:a4:4b:25:ad:ab:e6:64:68:
5c:b2:7b:1f:9a:48:4b:6b:09:8d:f0:99:12:87:e3:
0e:91:74:d7:ae:5a:4a:2b:3d:49:1a:5d:a9:7e:47:
94:97:db:9a:f9:d6:e0:e9:31:b3:55:ab:5e:21:56:
04:1a:d8:fc:3f:ca:f4:19:94:85:72:82:09:f7:ce:
e4:7d:11:4b:56:f8:21:d2:4b:b6:19:8a:c5:1d:33:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:4A:A2:DB:82:5E:95:2E:D7:97:94:A8:5E:9C:C6:ED:2C:3E:89
X509v3 Authority Key Identifier:
keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c2:40:48:b6:0a:95:57:9c:6f:ef:19:44:35:ea:13:98:81:
bf:4f:aa:70:30:ce:87:c3:ea:3a:f8:9d:df:23:83:02:10:93:
2a:c4:79:d2:9c:a5:aa:ee:6f:62:93:93:3a:13:db:11:77:0e:
fc:49:d3:82:05:43:07:4f:90:75:45:41:01:1b:57:b6:c0:bc:
4c:bb:66:6d:80:b1:c2:ef:40:19:96:cc:0e:81:bd:80:b3:07:
c7:7b:09:4d:c0:c5:b8:1b:e8:d6:28:d9:c3:5e:53:e7:2c:6c:
3f:38:69:da:bd:c0:16:e3:0b:d2:67:c7:bb:ce:bd:10:fa:f5:
af:94:e5:c8:1a:83:e5:4b:dd:0c:69:e5:19:a7:94:d0:c3:02:
7f:8c:89:98:f9:01:e3:b3:d2:41:ee:15:56:10:d2:83:54:2d:
fb:d3:bd:55:44:ec:39:b3:c7:d5:df:9f:fb:d3:5e:94:27:7f:
d1:3c:4f:7b:a1:59:28:70:f0:eb:f3:2d:00:ca:6a:2a:ef:44:
4a:69:2d:a1:82:dd:ba:13:af:51:a4:34:00:2d:1c:5d:ae:1f:
c6:bd:3f:2e:76:9d:78:6b:d0:c1:82:8a:03:8e:1b:ae:8d:61:
14:00:c7:d4:33:98:f9:4d:8d:da:9c:e0:7c:14:f5:92:01:08:
2c:bd:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:25 2026 by rpki-client